omniblack-model (>=0.1.1, <=0.1.4.post5) potentially affected by CVE-2026-64847 via anyio (3.0.0)

anyio PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - omniblack-model =0.1.1, =0.1.4.post5 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...

@7polo/vue3-editors (>=0.0.1, <=0.1.2), @acronis-platform/ui-component-library (>=1.3.1, <=1.33.0) +70 more potentially affected by CVE-2026-84992 via md-editor-v3 (>=1.11.14, <=6.3.1)

md-editor-v3 NPM version =1.11.14, =0.0.1, =1.3.1, =0.0.1, =0.0.10, =1.0.0, =1.0.1, =1.1.58, =0.1.5, =0.14.0, =0.1.0, =11.2.0, =10.3.1, =11.0.0-alpha.1, =11.3.6 and more Source cves: CVE-2026-84992 Source advisory: MEND:CVE-2026-84992...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +6088 more potentially affected by CVE-2026-93579 via io.netty:netty-codec-http2 (>=4.2.0.final, <=4.2.17.final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-93579 Source advisory: MEND:CVE-2026-93579...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +293 more potentially affected by CVE-2026-93604 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +293 more potentially affected by CVE-2026-93605 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4.4), org.xwiki.rendering:xwiki-rendering-standalone (6.4.4) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4.4 -...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +5238 more potentially affected by CVE-2026-93573 via io.netty:netty-codec-http (>=4.2.12.final, <=4.2.17.final)

io.netty:netty-codec-http MAVEN version =4.2.12.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.8.0, =1.8.0, =4.13.5, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-93573 Source advisory: MEND:CVE-2026-93573...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.4_2.11 (>=1.0.6, <=1.2.7) +6870 more potentially affected by CVE-2026-93568 via io.netty:netty-all (>=4.1.64.final, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.64.final, =0.0.1, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-93568 Source advisory: MEND:CVE-2026-93568...

ai.pipestream.module:module-proxy (>=0.1.4, <=0.1.5), com.bucket4j:bucket4j_jdk17-infinispan (8.21.0) +416 more potentially affected by CVE-2026-10832 via org.wildfly.security:wildfly-elytron-asn1 (>=2.9.0.final, <=2.9.2.sp1)

org.wildfly.security:wildfly-elytron-asn1 MAVEN version =2.9.0.final, =0.1.4, =5.0.5, =5.0.5, =1.10.0, =3.7.0.alpha2, =3.7.0.alpha2, =3.7.0.beta1, =6.1.0, =4.1.0, =3.36.0, =2.10.0, =3.0.0.beta1 and more Source cves: CVE-2026-10832 Source advisory: MEND:CVE-2026-10832...

@accordproject/cicero-cli (>=0.23.0-20220318211856, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.23.0-20220318211856, <=0.24.1-20230627140514) +184 more potentially affected by CVE-2026-93606 via vm2 (>=3.9.6, <=3.11.6)

vm2 NPM version =3.9.6, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220318211856, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.23.0-20220317205016, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =0.1.0, =0.0.2, =1.0.2, =3.0.34 and more Source...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +12949 more potentially affected by CVE-2026-93561 via io.netty:netty-all (>=4.1.0.beta1, <=4.1.137.final)

io.netty:netty-all MAVEN version =4.1.0.beta1, =0.0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2026-93561 Source advisory: MEND:CVE-2026-93561...

CLEANSTART-2026-RW47187 Security fix for GHSA-5xrh-qmmq-w6ch applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-5xrh-qmmq-w6ch affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BL91899 Security fix for CVE-2024-52011 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3

CVE-2024-52011 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

com.flipkart.krystal:lattice-graphql-rest (>=0.1.5, <=0.1.6), com.flipkart.krystal:lattice-rest (>=0.1.5, <=0.1.6) +210 more potentially affected by CVE-2026-89059 via org.jboss.resteasy:resteasy-core (>=7.0.0.alpha1, <=7.0.4.final)

org.jboss.resteasy:resteasy-core MAVEN version =7.0.0.alpha1, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.2.0, =0.9.0, =0.9.8 and more Source cves: CVE-2026-89059 Source advisory: SNYK:JAVA-ORGJBOSSRESTEASY-20044968...

aiap-model (0.0.0), getsome (0.1.1) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.13.0)

virtualenv PYPI version 20.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aiap-model 0.0.0 - getsome 0.1.1 - invenio-cli =1.0.4, =0.0.1, =0.0.1, =0.17.0, =1.0.1.dev3, =0.0.1, =0.0.3 Source cves: CVE-2026-102925...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

baotool (1.0.1), farcaster-py (>=0.0.2, <=0.0.4) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.24.5)

virtualenv PYPI version 20.24.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - baotool 1.0.1 - farcaster-py =0.0.2, =2.0.0, =0.103.0, =0.1.0, =1.0.0, =1.3.1 - zoish 4.6.0 Source cves: CVE-2026-102925 Source advisory:...

mlproto (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-102925 via virtualenv (20.0.27)

virtualenv PYPI version 20.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - mlproto =0.1.1, =0.2.0 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

5gasp-cli (>=0.1.0, <=0.4.0), appcensus-dynamic-repos (0.6.1.91) +33 more potentially affected by CVE-2026-102925 via virtualenv (20.21.1)

virtualenv PYPI version 20.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - 5gasp-cli =0.1.0, =1.1.2, =1.3.0rc1, =1.5.9, =2.3.0, =0.0.88, =0.7.7, =1.0.3, =24.9.958497, =0.5.2, =0.6.0, =0.6.4 and more Source cves:...

ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102925 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...